main
refactor: drop the use of CSRF token entirely (#8300)
web: remove the install page (#8350)
refactor(db): move some methods off `user.go` (#7199)
templates: able to inject content to head and footer (#1286)
web: move password reset to React (#8290)
security: require POST for org team and member actions (#8321)
security: upgrade notebookjs and route ipynb HTML through DOMPurify (#8330)
feat: introduce React web frontend and migrate home + 404 pages (#8276)